Mesop-dev vulnerabilities
We track 5 vulnerabilities in Mesop-dev products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
Latest Mesop-dev vulnerabilities
- 8.7 High severity
mesop: Uncontrolled Resource Consumption
Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthentica
- 7.5 High severity
mesop: Allocation of Resources Without Limits or Throttling
Mesop is a Python-based UI framework that allows users to build web applications. From version 1.2.3 to before version 1.2.5, an uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated a
- 9.8 Critical severity
mesop: Improper Control of Generation of Code
Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explicit web endpoint inside the ai/ testing module infrastructure directly ingests untrusted Python code strings unconditionally without authenti
- 9.8 Critical severity
mesop: Improper Limitation of a Pathname to a Restricted Directory
Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerability that allows any user supplying an untrusted state_token through the UI stream payload to arbitrarily target files
- 8.1 High severity
mesop: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This